wireless-net/trunk/sbin/gen-wlan-files.py

arekm cvs at pld-linux.org
Wed Mar 22 21:25:44 CET 2006


Author: arekm
Date: Wed Mar 22 21:25:38 2006
New Revision: 7280

Modified:
   wireless-net/trunk/sbin/gen-wlan-files.py
Log:
Limit only p2p packets.

Modified: wireless-net/trunk/sbin/gen-wlan-files.py
==============================================================================
--- wireless-net/trunk/sbin/gen-wlan-files.py	(original)
+++ wireless-net/trunk/sbin/gen-wlan-files.py	Wed Mar 22 21:25:38 2006
@@ -182,8 +182,12 @@
 #    run("iptables -A packets_%s -p tcp -j REJECT --reject-with tcp-reset" % (nr))
 #    run("iptables -A packets_%s -p udp -j REJECT --reject-with icmp-port-unreachable" % (nr))
     run("iptables -A packets_%s -j DROP" % (nr))
-    run("iptables -A packets -s %s -j packets_%s" % (ip, nr))
-    run("iptables -A packets -d %s -j packets_%s" % (ip, nr))
+    if is_p2p:
+        run("iptables -A packets -s %s -m p2p --p2p all -j packets_%s" % (ip, nr))
+        run("iptables -A packets -d %s -m p2p --p2p all -j packets_%s" % (ip, nr))
+    if is_ipp2p:
+        run("iptables -A packets -s %s -m ipp2p --ipp2p -j packets_%s" % (ip, nr))
+        run("iptables -A packets -d %s -m ipp2p --ipp2p -j packets_%s" % (ip, nr))
 
     if is_p2p:
 	    run("iptables -A peer2peer -p tcp -s %s -m connlimit --connlimit-above 10 -m p2p --p2p all -j REJECT" % (ip))


More information about the pld-cvs-commit mailing list